APT

Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29

Cybaze ZLab – Yoroi team analyzed malware used in recent attacks on US entities attributed to APT29

Malware researchers from Cybaze ZLab - Yoroi team have detected a new strain of malware that appears to be associated with…

7 years ago
Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkitCybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit

Cybaze ZLab- Yoroi team spotted a new variant of the APT28 Lojax rootkit

Malware researchers at the Cybaze ZLab- Yoroi team spotted a new variant of the dangerous APT28 Lojax rootkit. A new…

7 years ago
Chinese TEMP.Periscope cyberespionage group was using TTPs associated with Russian APTsChinese TEMP.Periscope cyberespionage group was using TTPs associated with Russian APTs

Chinese TEMP.Periscope cyberespionage group was using TTPs associated with Russian APTs

Chinese TEMP.Periscope cyberespionage group targeted a UK-based engineering company using TTPs associated with Russia-linked APT groups. Attribution of cyber attacks…

7 years ago
Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East AttacksCyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks

Cyber espionage group used CVE-2018-8589 Windows Zero-Day in Middle East Attacks

Kaspersky revealed that the CVE-2018-8589  Windows 0-day fixed by Microsoft Nov. 2018 Patch Tuesday has been exploited by at least one APT group…

7 years ago
Operation Shaheen – Pakistan Air Force members targeted by nation-state attackersOperation Shaheen – Pakistan Air Force members targeted by nation-state attackers

Operation Shaheen – Pakistan Air Force members targeted by nation-state attackers

Security firm Cylance has uncovered a sophisticated state-sponsored campaign, tracked as Operation Shaheen, against the Pakistan Air Force. According to…

7 years ago
CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wildCVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild

CVE-2018-15961: Adobe ColdFusion Flaw exploited in attacks in the wild

Experts at Volexity discovered that a recently patched remote code execution flaw (CVE-2018-15961) affecting the Adobe ColdFusion has been exploited in the…

7 years ago
Symantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banksSymantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banks

Symantec shared details of North Korean Lazarus’s FastCash Trojan used to hack banks

North Korea-linked Lazarus Group has been using FastCash Trojan to compromise AIX servers to empty tens of millions of dollars…

7 years ago
Attackers behind Operation Oceansalt reuse code from Chinese Comment CrewAttackers behind Operation Oceansalt reuse code from Chinese Comment Crew

Attackers behind Operation Oceansalt reuse code from Chinese Comment Crew

Security researchers from McAfee have recently uncovered a cyber espionage campaign, tracked as Operation Oceansalt, targeting South Korea, the United States, and Canada.…

7 years ago
GreyEnergy cyberespionage group targets Poland and UkraineGreyEnergy cyberespionage group targets Poland and Ukraine

GreyEnergy cyberespionage group targets Poland and Ukraine

Security researchers from ESET published a detailed analysis of a recently discovered cyber espionage group tracked as GreyEnergy. Security experts…

7 years ago
Russia-linked APT group DustSquad targets diplomatic entities in Central AsiaRussia-linked APT group DustSquad targets diplomatic entities in Central Asia

Russia-linked APT group DustSquad targets diplomatic entities in Central Asia

Kaspersky experts published a detailed analysis of the attacks conducted by the Russian-linked cyber espionage group DustSquad. Earlier October, security experts from…

7 years ago